Microsoft Windows win32k.sys Memory Corruption Vulnerability

A vulnerability has been discovered in Microsoft Windows which can be exploited by malicious parties to potentially compromise a user’s system. The vulnerability is caused due to an error in win32k.sys and can be exploited to corrupt memory via a specially crafted web page containing an IFRAME with an overly large “height” attribute. This is […]

Security Advisory for Adobe Reader and Acrobat!

A critical vulnerability has been identified in Adobe Reader X (10.1.1) and earlier versions for Windows and Macintosh, Adobe Reader 9.4.6 and earlier 9.x versions for UNIX and Adobe Acrobat X (10.1.1) and earlier versions for Windows and Macintosh. This vulnerability (CVE-2011-2462) could cause a crash and potentially allow an attacker to take control of […]

BSNL website gets hacked

The Government owned Bharat Sanchar Nigam Limited (BSNL – the leading Indian telecommunication company) website has suffered yet another hacker attack. This time it was in the early hours of Sunday (December 4, 2011). After the hacking a message appeared on the site – “Your site Security is Shit and if you Dont Update We […]

Microsoft November2011 Patch Tuesday Released

Microsoft has released only four bulletins covering a total of four vulnerabilities in its monthly security update. One of the bulletins is rated “Critical” while two are rated “Important” and the remaining one is rated “Moderate.” The only ‘Critical’ rated issue affects the Windows TCP/IP stack. It can potentially be exploited to completely compromise an […]

Firefox 8 released!

Mozilla announced today the official release of Firefox 8, a new version of the popular open source web browser. The modest update introduces a few new features and brings a number of minor improvements to the browser’s underlying HTML renderer. The built-in search box in Firefox’s navigation toolbar has been extended to support Twitter searches. […]

Microsoft announces workaround for the Duqu exploit

Microsoft has posted a security advisory 2639658 to address the recently disclosed Windows kernel vulnerability (CVE-2011-3402) exploited by the Duqu malware. Microsoft has determined the flaw is in the processing of embedded True Type Fonts (TTFs). According to Microsoft: “The attacker could then install programs; view, change, or delete data; or create new accounts with […]

Surfing the Internet the secure way with browser sandbox

PC’s today are mostly victims of infections caused by visiting infected websites that drop malware codes. Even though we have website reputation checks implemented by all anti-malware software, there is always a slight chance that the user may visit a newly infected website that has not yet been classified as ‘infected’ in the reputation database. […]

Microsoft October2011 Patch Tuesday Released

Microsoft has released 8 security bulletins covering a total of 23 vulnerabilities for software such as Microsoft .NET Framework, Microsoft Silverlight, Internet Explorer, Microsoft Forefront United Access Gateway and Microsoft Host Integration Server. 6 out of the 8 bulletins are rated ‘Important’, while 2 are rated ‘Critical’. Some of the patches indicated a required restart […]

Firefox 7 released!

Mozilla, a global non-profit organization dedicated to making the web better, released an update to Firefox for Windows, Mac and Linux. Mozilla Firefox provides a speedy web browsing experience for users and has released new tools to help developers create faster websites and web apps. Firefox manages memory more efficiently in order to deliver a […]